b1fe9ce607764d269892ccc8f2c01d68f7932beb3ab7ef6221ebbfeb83eb4cee

Analysis

max time kernel
138s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 04:45

Target

b1fe9ce607764d269892ccc8f2c01d68f7932beb3ab7ef6221ebbfeb83eb4cee.exe
Size

335KB
MD5

9045471ffaa78c7e3e54380ce4b6bac7
SHA1

c480e14779782467d48316d54f10b524d7d0bc50
SHA256

b1fe9ce607764d269892ccc8f2c01d68f7932beb3ab7ef6221ebbfeb83eb4cee
SHA512

8155a2e9215731f782c4993a871a1404d7cae2a917cb682fac87649cc62224b75740832ce238e56ee7477f8c29f457867bee5e69f85b7ea433e5a89e5daba14d
SSDEEP

6144:/414DREcMZ5vVCiiKrao9afJu3YYtWGaVoRiS6hxH5AgPa6:/3FuvVCiisao9Ii3aViKHy

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4908	1092	WerFault.exe	82
2712	1092	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\b1fe9ce607764d269892ccc8f2c01d68f7932beb3ab7ef6221ebbfeb83eb4cee.exe
"C:\Users\Admin\AppData\Local\Temp\b1fe9ce607764d269892ccc8f2c01d68f7932beb3ab7ef6221ebbfeb83eb4cee.exe"
1⤵
PID:1092
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1092 -s 496
  2⤵
  - Program crash
  PID:4908
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1092 -s 504
  2⤵
  - Program crash
  PID:2712

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1092 -ip 1092
1⤵
PID:1504

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 1092 -ip 1092
1⤵
PID:1780